start::
closeprocesses:
createrestorepoint:
FirewallRules: [TCP Query User{0BA86A18-4CF0-48B8-93D0-FFADC13F7A7F}C:\users\francine\searches\downloads\anydesk.exe] => (Block) C:\users\francine\searches\downloads\anydesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [UDP Query User{890F439C-B324-4907-98FF-3248F53F0358}C:\users\francine\searches\downloads\anydesk.exe] => (Block) C:\users\francine\searches\downloads\anydesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [TCP Query User{D3FE5F73-DC96-42AC-ABC7-8DD1A83E9BBD}C:\users\francine\searches\downloads\anydesk (1).exe] => (Block) C:\users\francine\searches\downloads\anydesk (1).exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [UDP Query User{36FCF06F-8DD3-4725-87A3-8BBE59F168F9}C:\users\francine\searches\downloads\anydesk (1).exe] => (Block) C:\users\francine\searches\downloads\anydesk (1).exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
2024-02-19 12:53 - 2020-03-07 00:24 - 000000000 ____D C:\Users\Francine\AppData\Roaming\AnyDesk
2024-02-19 16:12 - 2024-02-19 16:12 - 000001175 _____ C:\Users\Francine\Desktop\AnyDesk (1).exe - Raccourci.lnk
C:\users\francine\searches\downloads\anydesk.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {B1DDF2CD-C294-4782-8773-591E331674BE} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (Pas de fichier)
Task: {9026EE8C-833E-4650-9B8F-8B67212752DB} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe task (Pas de fichier)
Task: {F4C6CD6F-49C2-4EEF-8979-A556307C532B} - System32\Tasks\EPSON XP-225 Series Update {06D87731-1C17-4873-8437-1E8995892A38} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNFE.EXE /EXE:"{06D87731-1C17-4873-8437-1E8995892A38}" /F:"Update" (Pas de fichier)
Task: {BF1F3973-9279-4528-BCD7-A99ED06FC24F} - System32\Tasks\EPSON XP-225 Series Update {11E472BD-422D-4AFF-BE0D-79FDD750789C} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNFE.EXE /EXE:"{11E472BD-422D-4AFF-BE0D-79FDD750789C}" /F:"Update" (Pas de fichier)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe join (Pas de fichier)
Task: {B29D4EDA-CEC4-4077-828D-787EF9CD7005} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3290468281-2238696606-1365827919-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (Pas de fichier)
Task: {514F8C15-F5AB-4A9C-B170-FDD4E3928310} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3290468281-2238696606-1365827919-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {6955CFEC-517D-4F7A-98B7-5D842B834B3E} - System32\Tasks\Quick Access Quick Launcher => "C:\Program Files\Acer\Acer Quick Access\QALauncher.exe" -noui -normsvc (Pas de fichier)
Task: {6A1820A5-798C-4148-9650-DA2094C5F4B4} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3290468281-2238696606-1365827919-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe /bgrecordaliveevent (Pas de fichier)
Task: {98262A23-AA6B-46C3-950F-7915612BBF2D} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3290468281-2238696606-1365827919-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe /logoncheck (Pas de fichier)
Task: {884AB029-2470-42A3-9718-CFDD5ACFE34E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3290468281-2238696606-1365827919-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe /scheduledcheck (Pas de fichier)
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => non trouvé(e)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
emptytemp:
end::